7.5
High
CVE-2025-7731 Cleartext Transmission of Sensitive Information vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series…
Description
Cleartext Transmission of Sensitive Information vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows a remote unauthenticated attacker to obtain credential information by intercepting SLMP communication messages, and read or write the device values of the product and stop the operations of programs by using the obtained credential information.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| MELSEC iQ-F Series FX5U-32MT/ES | Versions not published | |
| MELSEC iQ-F Series FX5U-32MT/DS | Versions not published | |
| MELSEC iQ-F Series FX5U-32MT/ESS | Versions not published | |
| MELSEC iQ-F Series FX5U-32MT/DSS | Versions not published | |
| MELSEC iQ-F Series FX5U-32MR/ES | Versions not published | |
| MELSEC iQ-F Series FX5U-32MR/DS | Versions not published | |
| MELSEC iQ-F Series FX5U-64MT/ES | Versions not published | |
| MELSEC iQ-F Series FX5U-64MT/DS | Versions not published | |
| MELSEC iQ-F Series FX5U-64MT/ESS | Versions not published |
Show the 66 other branches Hide the 66 other branches
Other CVEs of MELSEC iQ-F Series FX5U-32MT/ES
The 11 CVEs of MELSEC iQ-F Series FX5U-32MT/ES →
CVE-2025-10259
Improper Validation of Specified Quantity in Input vulnerability in TCP Communication Function on Mitsubishi Electric…
5.3
Medium
CVE-2025-7405
Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU…
7.3
High
CVE-2025-5514
Improper Handling of Length Parameter Inconsistency vulnerability in web server function on Mitsubishi Electric…
5.3
Medium
CVE-2025-5241
Overly Restrictive Account Lockout Mechanism vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series…
5.3
Medium